Threats tagged 'ghsa-gch7-fp6f-5fp2'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.2%	CVE-2025-12031HTTP Security Misconfiguration - Lacking Secure and HTTPOnly Attribute may allow reading the sensitive cookies from Medium5.3EPSS 0.2%2025-10-21GCVE DatabaseCVE-2025-12031 This vulnerability involves an HTTP security misconfiguration where sensitive cookies lack the Secure and HttpOnly attributes. This misconfiguration may allow these cookies to be accessed via JavaScript, potentially exposing sensitive information. It affects BLU-IC2 and BLU-IC4 products up to version 1.19.5. EPSS 0.2%Report on CVE-2025-12031 Vulnerability CWE-1004 #ghsa-gch7-fp6f-5fp2	GCVE Database	2025-10-21

Page 1 of 1